Bug 870142 (CVE-2022-38012)

Summary:	<www-client/microsoft-edge-105.0.1343.25: local remote code execution
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	chromium
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38012
Whiteboard:	B2 [glsa+]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2022-09-14 19:26:29 UTC

CVE-2022-38012:

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability.

Comment 1 John Helmert III archtester

2022-09-26 13:48:12 UTC

GLSA request filed

Comment 2 Larry the Git Cow gentoo-dev

2022-09-29 14:48:30 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=31ae708a90dd2ca9e628226aec8c4362dffb1794

commit 31ae708a90dd2ca9e628226aec8c4362dffb1794
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2022-09-29 14:24:25 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2022-09-29 14:48:01 +0000

    [ GLSA 202209-23 ] Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/868156
    Bug: https://bugs.gentoo.org/868354
    Bug: https://bugs.gentoo.org/870142
    Bug: https://bugs.gentoo.org/872407
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 glsa-202209-23.xml | 112 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 112 insertions(+)

Comment 3 John Helmert III archtester

2022-09-29 14:53:20 UTC

GLSA released, all done!